Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
File:                     6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft (raw, json)
Hash identifier:          sXrKtSwoGgyd2bymLR7ZLEDmFZM52Mmdp+GGn1XTIQ8=
Subject key identifier:   93:86:BA:C3:B6:B9:22:FF:36:D2:1C:38:24:1E:B4:ED:B5:E2:D7:89
Authority key identifier: E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8
Certificate issuer:       /CN=e8d878aa53081893ba528524ef143ea9271392b8
Certificate serial:       019D2628489A69A53BC79097F2A178A74480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 18:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:07 +0000
Files and hashes:         1: 6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl (hash: opYUR27YGY0AilglU5PbpfVEk6d6JlgfJbnEfKnPT+w=)
                          2: kyiZYLBaKIrj5tT8RkwqZracJC8.roa (hash: vKqajVq23PYVXFkY+10uAWZKmF5NFtLP9M4UhXMBcyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:48:9a:69:a5:3b:c7:90:97:f2:a1:78:a7:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d878aa53081893ba528524ef143ea9271392b8
        Validity
            Not Before: Mar 25 18:01:07 2026 GMT
            Not After : Mar 26 18:01:07 2026 GMT
        Subject: CN=9386bac3b6b922ff36d21c38241eb4edb5e2d789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:69:05:00:69:f6:7d:93:6e:3b:36:39:a7:
                    cb:93:e9:9b:a1:c9:c3:20:4b:cd:0c:30:38:85:50:
                    3c:d7:a1:ae:4b:e7:96:9d:e3:a9:33:1b:5b:38:76:
                    71:54:14:14:8c:d6:8c:78:67:03:82:44:38:a2:5d:
                    a6:bb:d6:eb:9b:e7:56:47:2d:ae:cc:a4:a8:4a:02:
                    25:24:93:ac:96:c8:b8:d1:f0:de:74:fb:09:f7:6d:
                    dd:e1:3c:2d:b8:8d:86:7a:2c:01:81:8d:91:ca:e3:
                    72:b2:35:8a:04:eb:df:42:5a:71:b6:d8:c5:9f:28:
                    86:8d:5f:49:d8:46:3c:fc:19:ec:95:6e:9a:00:84:
                    f6:9c:6c:3b:0a:df:c2:cf:a1:6b:8d:0c:04:4a:cb:
                    6b:ab:ec:9f:9b:3e:61:02:f3:b8:30:78:0d:d2:00:
                    55:93:7d:41:e0:6c:00:dd:9b:e6:50:ec:59:74:65:
                    14:0a:6b:7d:d1:32:5e:7b:cf:22:20:62:09:7d:72:
                    02:d0:e4:ba:f1:12:8a:90:1f:75:89:6c:8e:8f:7d:
                    51:2b:f7:6a:de:c0:7b:09:31:f2:3e:3f:3a:16:31:
                    48:7d:dd:6c:f5:3a:65:f9:4e:ed:99:3e:a8:75:a6:
                    17:95:30:5a:be:41:8f:65:90:ab:50:fe:88:d4:31:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:86:BA:C3:B6:B9:22:FF:36:D2:1C:38:24:1E:B4:ED:B5:E2:D7:89
            X509v3 Authority Key Identifier:
                keyid:E8:D8:78:AA:53:08:18:93:BA:52:85:24:EF:14:3E:A9:27:13:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ad64bb-d539-4a8e-b0e6-5f89b885f729/1/6Nh4qlMIGJO6UoUk7xQ-qScTkrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:3b:50:e9:ca:b6:9c:d8:b5:fc:bc:77:07:ab:16:0c:f5:
         bc:5e:76:b3:f5:67:83:39:8e:53:f1:9b:eb:d4:7d:a9:b7:d5:
         70:64:06:6b:15:f4:e3:f1:35:e5:bc:aa:c1:e7:7a:b2:16:98:
         b8:29:9d:0a:1d:9b:34:d2:81:e9:61:a0:cc:9e:65:08:1c:eb:
         76:ce:43:c4:af:d4:f2:31:1a:70:0b:51:93:86:7b:37:21:a0:
         32:13:0e:0e:b1:9c:a9:9b:11:4e:cd:f9:6a:b7:c8:5c:76:60:
         b7:d0:ea:d5:c7:e4:b7:cf:75:c8:e1:95:a5:db:80:9a:24:c1:
         43:4d:10:03:c2:55:a5:9b:49:ca:1d:2a:18:e6:39:35:e8:f7:
         7c:e5:45:81:bb:ce:36:51:42:c6:41:37:f3:7f:51:41:f0:6d:
         6e:b9:ce:d6:96:a7:38:5a:4d:d6:35:ce:78:94:4a:d8:29:52:
         32:dd:0c:66:ba:0a:18:3f:fe:dd:a0:b4:18:c0:7b:55:78:82:
         ab:3b:18:24:ee:b0:ec:c9:86:81:b4:23:db:33:95:8a:0f:c6:
         76:b4:52:60:a7:bf:0a:4b:66:0f:2a:62:9a:21:89:54:c8:8f:
         a5:03:e9:e7:fe:9a:24:e1:8b:f6:f8:b3:ef:38:6f:13:df:b0:
         9e:e2:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:15 2026 by rpki-client